← Back to selected work

Reusing control evidence

Multi-Framework Compliance Workbook

A workbook for spotting when different compliance frameworks ask for similar evidence.

ComplianceControl mappingEvidence

It maps related questions across SOC 2, ISO 27001, HIPAA, and DPDPA to help plan interviews and evidence collection.

RoleWorkbook and mapping designer
Business questionWhere can one control interview support several framework reviews?
ArchitectureSpreadsheet control crosswalk, evidence register, and gap tracker

THE OPERATING FLOW

01Collect control questions
02Map overlapping evidence needs
03Track gaps and owners

CASE STUDY

The challenge

Teams can be asked for similar proof several times under different framework names.

What I designed and built

  • Grouped overlap while retaining each framework's distinct question.
  • Kept evidence ownership visible for review.

Outcome

  • A simpler preparation process for several reviews.
  • A reusable map of overlapping evidence needs.

The workbook does not establish compliance or certification. Internal controls and evidence are not published.